Unscored CVE-2007-3412 EUVD-2007-3398GHSA-8xmw-vwcq-7673

Cross-site scripting (XSS) vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to inject arbitra…

Published Jun 26, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter.

References

clickgallery-editimage-xss(35024) vdb-entry
36371 vdb-entry
25805 third-party-advisory
http://pridels-team.blogspot.com/2007/06/clickgallery-server-vuln.html